9fcf9189976d drm-tip: 2025y-12m-01d-01h-50m-38s UTC integration manifest 7d0a66e4bb90 Linux 6.18 841ecc979b18 MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow 19eef1d98eed afs: Fix uninit var in afs_alloc_anon_key() 157d0854a24f drm-tip: 2025y-11m-28d-22h-07m-04s UTC integration manifest e3cee98f2fcc mailbox: th1520: fix clock imbalance on probe failure ff0e4d4c97c9 mailbox: pcc: don't zero error register 094b53ecaa3e mailbox: mtk-gpueb: Add missing 'static' to mailbox ops struct a195c7ccfb7a mailbox: mtk-cmdq: Refine DMA address handling for the command buffer 3acf1028f500 mailbox: mailbox-test: Fix debugfs_create_dir error checking 060e4e835f93 mailbox: omap-mailbox: Check for pending msgs only when mbox is exclusive d27c71257825 afs: Fix delayed allocation of a cell's anonymous key e9c70084a64e ovl: fail ovl_lock_rename_workdir() if either target is unhashed fbf04215d996 Revert "ACPI: processor: Update cpuidle driver check in __acpi_processor_start()" f07f4ea53e22 mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose(). 40ad64ac25bb spi: nxp-fspi: Propagate fwnode in ACPI case as well 8684229e19c4 regulator: rtq2208: Correct LDO2 logic judgment bits 45cc214152bc regulator: rtq2208: Correct buck group2 phase mapping logic 9a060d0fac9e net: fec: do not register PPS event for PEROUT c0a1f3d7e128 net: fec: do not allow enabling PPS and PEROUT simultaneously e97faa0c20ea net: fec: do not update PEROUT if it is enabled 50caa744689e net: fec: cancel perout_timer when PEROUT is disabled b3e528a5811b net: mctp: unconditionally set skb->dev on dst output 7fce830ecd0a libceph: prevent potential out-of-bounds writes in handle_auth_session_key() ec3797f04375 libceph: replace BUG_ON with bounds check for map->max_osd 43962db4a6f5 ceph: fix crash in process_v2_sparse_read() for encrypted directories 5ffcb7b890f6 net: atlantic: fix fragment overflow handling in RX path 384c1a4e2722 MAINTAINERS: separate VIRTIO NET DRIVER and add netdev 1cd1c472343b virtio-net: avoid unnecessary checksum calculation on guest RX 6d66e093e074 eth: fbnic: Fix counter roll-over issue 27fd02860164 mptcp: clear scheduled subflows on retransmit da62abaaa268 net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic b9ba6338bc6e s390/net: list Aswin Karuvally as maintainer 4fcb8ab4a09b net: wwan: mhi: Keep modem name match with Foxconn T99W640 779bcdd4b9ae vhost: rewind next_avail_head while discarding descriptors 85f5491d9c6e libceph: drop started parameter of __ceph_open_session() 076381c26137 libceph: fix potential use-after-free in have_mon_and_osd_map() d0d08f4bd7f6 dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings ad8cccc24887 Fix Intel Dollar Cove TI battery driver 32-bit build error 32115734c0ed Increase the default 32-bit build frame size warning limit to 1280 bytes 0c922106d7a5 net/sched: em_canid: fix uninit-value in em_canid_match 6d849ff57372 can: rcar_canfd: Fix CAN-FD mode as default 3dcf44ab56e1 spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA 2bf95a9bcb50 serial: 8250: Fix 8250_rsa symbol loop d041e5e748f9 ALSA: hda/realtek: Add quirk for HP ProBook 450 G8 0ebc27a4c67d xsk: avoid data corruption on cq descriptor number ae1737e7339b r8169: fix RTL8127 hang on suspend/shutdown f5bce28f6b91 net: sxgbe: fix potential NULL dereference in sxgbe_rx() 0ae9cfc454ea team: Move team device type change at the end of team_port_add d2099d9f16db net/mlx5e: Fix validation logic in rate limiting 3184b6a5a24e smb: client: fix memory leak in cifs_construct_tcon() b042fdf18e89 tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs c7418164b463 timekeeping: Fix error code in tk_aux_sysfs_init() 43ff36c4a5a5 Revert "ACPI: processor: idle: Optimize ACPI idle driver registration" d26e9f669cc0 ALSA: usb-audio: fix uac2 clock source at terminal parser 9780f535f8e0 net: lan966x: Fix the initialization of taprio 1a8b3501821b Revert "ACPI: processor: Remove unused empty stubs of some functions" f6dc5a36195d io_uring: fix mixed cqe overflow handling e6889323c218 Revert "ACPI: processor: idle: Rearrange declarations in header file" 66e600a26ee7 Revert "ACPI: processor: idle: Redefine two functions as void" 34fa09c698d6 Revert "ACPI: processor: Do not expose global variable acpi_idle_driver" 747528729c9b mmc: sdhci-of-dwcmshc: Promote the th1520 reset handling to ip level 081156ce13f8 net: phy: mxl-gpy: fix link properties on USXGMII and internal PHYs 82fca3d8a4a3 atm/fore200e: Fix possible data race in fore200e_open() d0b8fec8ae50 net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}() 0f80e21bf622 net: dsa: microchip: Free previously initialized ports on init failures 25b62cc5b22c net: dsa: microchip: Don't free uninitialized ksz_irq 9e059305be41 net: dsa: microchip: ptp: Fix checks on irq_find_mapping() 7b3c09e16679 net: dsa: microchip: common: Fix checks on irq_find_mapping() 7526183cfdbe net: aquantia: Add missing descriptor cache invalidation on ATL2 7b6dcd9bfd86 fs/namespace: fix reference leak in grab_requested_mnt_ns 4fe5a00ec707 net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr() 7c9580f44f90 mm/filemap: fix logic around SIGBUS in filemap_map_pages() cff47b9e39a6 mm/huge_memory: fix NULL pointer deference when splitting folio 6c96c6bd2c71 MAINTAINERS: add test_kho to KHO's entry 52ac3f5829ee mailmap: add entry for Sam Protsenko f0bb6dba3df3 selftests/mm: fix division-by-zero in uffd-unit-tests 270065f514c5 mm/mmap_lock: reset maple state on lock_vma_under_rcu() retry de8798965fd0 mm/memfd: fix information leak in hugetlb folios f5e31a196edc mm: swap: remove duplicate nr_swap_pages decrement in get_swap_page_of_type() 1a96f3a22fd8 iommu/dma: add missing support for DMA_ATTR_MMIO for dma_iova_unlink() f6041803a831 io_uring/net: ensure vectored buffer node import is tied to notification 03bc4831ef06 nvmem: layouts: fix nvmem_layout_bus_uevent 74851fbb6d64 usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors 165eb13e485c arm64: proton-pack: Fix hard lockup when !MITIGATE_SPECTRE_BRANCH_HISTORY 7c16c02e8608 ACPI: GTDT: Correctly number platform devices for MMIO timers 9238fa35a3c0 Revert "arm64: acpi: Enable ACPI CCEL support" 9b9c0adbc3f8 platform/x86: intel: punit_ipc: fix memory corruption a90903c2a3c3 spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors c98c99d5dbdf pmdomain: tegra: Add GENPD_FLAG_NO_STAY_ON flag c1bac49fe91f pmdomains: mtk-pm-domains: Fix spinlock recursion in probe df5fde297e61 USB: storage: Remove subclass and protocol overrides from Novatek quirk ec3803b5917b net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY 9f393d8e757f riscv: dts: allwinner: d1: fix vlenb property b07bf253ef8e iommufd/iommufd_private.h: Avoid -Wflex-array-member-not-at-end warning ac84ff453305 iommufd/driver: Fix counter initialization for counted_by annotation 752630cb8c62 platform: arm64: thinkpad-t14s-ec: sleep after EC access 29be646f75c4 platform: arm64: thinkpad-t14s-ec: fix IRQ race condition 9f0c21bac5a8 spi: spi-fsl-lpspi: fix watermark truncation caused by type cast 26d56a9fcb20 usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer e4037689a366 usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths 1f73b8b56cf3 xhci: dbgtty: fix device unregister b59d4fda7e7d usb: storage: sddr55: Reject out-of-bound new_pba fe680d8c747f dm-verity: fix unreliable memory allocation be4c9abdf04b ALSA: hda/realtek: add quirk for HP pavilion aero laptop 13z-be200 a14602fcae17 veth: reduce XDP no_direct return section to fix race 4b4749b7b4b3 net: atm: fix incorrect cleanup function call in error path 545d7827b2cd Bluetooth: SMP: Fix not generating mackey and ltk when repairing c884a0b27b45 Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref 79a2d4678ba9 Bluetooth: hci_core: lookup hci_conn on RX path on protocol side 89bb613511cc Bluetooth: hci_sock: Prevent race in socket write iter and sock bind 275ddfeb3fdc Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP 4015b9797671 Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface a612d24e850b dm: fix failure when empty flush's bi_sector points beyond the device end 295fe8406a35 spi: cadence-quadspi: Fix cqspi_probe() error handling for runtime pm a6ee8422b4f2 dm-pcache: zero cache_info before default init 840b80af74fd dm-pcache: reuse meta_addr in pcache_meta_find_latest 341d14bd69d0 dm-pcache: allow built-in build and rename flush helper 5719a189c934 ALSA: hda/cirrus fix cs420x MacPro 6,1 inverted jack detection fd9862f726ae spi: bcm63xx: fix premature CS deassertion on RX-only transactions 517d066dc080 MAINTAINERS: Add entry for TQ-Systems AM335 device trees c83fc1396064 ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 d4371c266ba3 ALSA: au88x0: Fix incorrect error handling for PCI config reads 76544beea7cf can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling 395d988f9386 can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data e19d7f7e92e0 tee: qcomtee: initialize result before use in release worker 6fe9f3279f7d can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header 516a0cd1c03f can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs 30db4451c7f6 can: sja1000: fix max irq loop handling 0c73772cd2b8 can: kvaser_usb: leaf: Fix potential infinite loop in command parsers e89ee35567d3 arm64: dts: imx8qm-mek: fix mux-controller select/enable-gpios polarity ac5ae0a5ce22 tee: qcomtee: fix uninitialized pointers with free attribute 10eaa4c4a257 spi: spi-cadence-quadspi: Remove duplicate pm_runtime_put_autosuspend() call f1eb4e792bb1 spi: spi-cadence-quadspi: Enable pm runtime earlier to avoid imbalance 3aa385a9c75c iio: accel: bmc150: Fix irq assumption regression 1b03346314b7 ARM: dts: nxp: imx6ul: correct SAI3 interrupt line 5b6677d6451b arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos f10a788e4b6a arm64: dts: imx8dxl: Correct pcie-ep interrupt number 523bf0a59e67 USB: serial: option: add support for Rolling RW101R-GL baadf2a5c26e most: usb: fix double free on late probe failure 96cf8500934e slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves 23379a17334f usb: typec: ucsi: psy: Set max current to zero when disconnected e4f5ce990818 usb: gadget: f_eem: Fix memory leak in eem_unwrap 46b28d2fbd13 usb: dwc3: pci: Sort out the Intel device IDs c57ce99ec6cb usb: dwc3: pci: add support for the Intel Nova Lake -S 40f8d17eed75 drivers/usb/dwc3: fix PCI parent check 41e99fe20051 usb: storage: Fix memory leak in USB bulk transport 8c13a7323b84 xhci: sideband: Fix race condition in sideband unregister f6bb3b67be9a xhci: dbgtty: Fix data corruption when transmitting data form DbC to host b69dfcab6894 xhci: fix stale flag preventig URBs after link state error is cleared d0fcf70c680e firmware: stratix10-svc: fix bug in saving controller data 1ebc180d2b90 mei: fix error flow in probe 2d8ab771d531 USB: serial: ftdi_sio: add support for u-blox EVK-M101 1ec39d2cd88d usb: cdns3: Fix double resource release in cdns3_pci_probe baeb66fbd420 usb: gadget: udc: fix use-after-free in usb_gadget_state_work eb9ac779830b usb: renesas_usbhs: Fix synchronous external abort on unbind eb4917f557d4 serial: amba-pl011: prefer dma_mapping_error() over explicit address checking 8abbf45fcda0 iio: st_lsm6dsx: Fixed calibrated timestamp calculation 3575254546a2 thunderbolt: Add support for Intel Wildcat Lake cb372b4f46d4 iio: humditiy: hdc3020: fix units for thresholds and hysteresis 7b8dc11c0a83 iio: humditiy: hdc3020: fix units for temperature and humidity measurement 3af0c1fb1cdc iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields c92c1bc408e9 iio: accel: fix ADXL355 startup race condition e2cc390a6629 iio: adc: ad7124: fix temperature channel 21553258b948 iio:common:ssp_sensors: Fix an error handling path ssp_probe() bd886cdcbf9e iio: adc: ad7280a: fix ad7280_store_balance_timer() 3db847df994d iio: buffer-dmaengine: enable .get_dma_dev() f9c198c3ccaf iio: buffer-dma: support getting the DMA channel a514bb109ead iio: buffer: support getting dma channel from the buffer 0bf1bfde53b3 iio: pressure: bmp280: correct meas_time_us calculation 8a6b7989ff0c iio: adc: stm32-dfsdm: fix st,adc-alt-channel property handling 632757312d7e iio: adc: ad7380: fix SPI offload trigger rate 9b45744bf09f iio: adc: rtq6056: Correct the sign bit index ffc74ad53913 iio: adc: ad4030: Fix _scale value for common-mode channels 109ff654934a counter: microchip-tcb-capture: Allow shared IRQ for multi-channel TCBs